7z
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
7zutility for archive management and includes installation scripts (scripts/install.shandscripts/install.ps1) that utilize system package managers such as apt, dnf, brew, and winget. - [EXTERNAL_DOWNLOADS]: The skill references official sources (7-zip.org) and well-known package registries for downloading the necessary binaries and source code.
- [PRIVILEGE_ESCALATION]: The
scripts/install.ps1script usessudofor Linux package installation tasks, which is standard procedure for system-level tool provisioning. - [INDIRECT_PROMPT_INJECTION]: The skill processes external archive files that could potentially contain path traversal sequences.
- Ingestion points: Archive files processed via
7z x(SKILL.md, references/troubleshooting.md) - Boundary markers: The documentation recommends using explicit output directories (
-o) to isolate extraction. - Capability inventory: Execution of the
7zbinary for extraction and listing (SKILL.md). - Sanitization: The skill provides specific instructions and a validation script to inspect archives for suspicious paths (
..or absolute paths) before extraction.
Audit Metadata